If the parties reach an agreement on the transaction after the due diligence period, they will sign a contract to seal the agreement. Such an agreement can be either a share purchase agreement, an asset sale agreement, or a combination of both. In the event that certain infringements have been found during the due diligence procedure, the buyer must verify, taking into account the gravity, whether it expects the seller to regulate such infringements before the conclusion or to bear the economic risks associated with them (such as fines or damages). In the case of infringements that can be corrected relatively easily (e.g. B no DSB has been designated), a condition precedent may be necessary to compel the seller to remedy the infringements before the conclusion of the transaction. In the event that, during the due diligence period, an identifiable risk, such as.B. The absence of data processing agreements, detected, could provide a solution to a specific compensation or price correction. Finally, risks of non-compliance with the GDPR that have not been detected during due diligence should be covered by a guarantee to ensure the accuracy of the measures taken or the current state of affairs, for example. B that the company fully complies with the GDPR, that no data protection disputes are ongoing or that no data protection violations have been found in the last three years. While the first two means of protection depend, on the one hand, on the importance of data protection, the breach itself and the negotiating power of the parties, on the other hand, and are therefore less widespread in practice, the data protection guarantee is a must in any M&A contract. Signature and conclusion of split – It is important to take into account the date of publication of personal data concerning employees, suppliers and target customers. If the purpose or asset is to be integrated into the buyer`s activities between exchange and completion, all personal data should, as far as possible, be provided in a non-identifiable form.
Therefore, instead of providing granular data, the seller could instead provide statistical information about employees or model employment contracts containing standard working and employment conditions. With respect to customers/customers, general information such as age/geographic data, size and frequency of purchases, types of products or services purchased, etc. . . .